MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b0bdc8160d902db24f8271621d73459bcbf6da8a84f9f31be0ac0e21ec3ce441. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b0bdc8160d902db24f8271621d73459bcbf6da8a84f9f31be0ac0e21ec3ce441
SHA3-384 hash: 56b1295fef9a1ecc2d20f5c3dd7c2850e1e35bfa17b4db3e9f27a58273a696db0ea3ee188f7373827de55ebb8ff4873a
SHA1 hash: bd6d2042728790251f07e4435937fb4810d1ae0b
MD5 hash: 991b320acca85015a67b0960347f0c54
humanhash: speaker-jupiter-wisconsin-black
File name:New Purchase Order.pdf.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:423'702 bytes
First seen:2020-06-15 07:58:49 UTC
Last seen:2020-06-15 15:04:09 UTC
File type: rar
MIME type:application/x-rar
ssdeep 6144:W0dSWmV/F6LPEo8W7uu4W7pmPjiKovs+Uqai/MYHf4aOXeJzm/sz1vyz1bmT6dSs:WLFirzWovs+U59YHf4BXCK/sz1vy53L/
TLSH 4F9423855723241C5583667C3F86A25D9FCE20438F6E5D692E768FCDFB24FAA6082432
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: Sharifah Rashidah <rashidah@skyshine.com.my>
Received: from skyshine.com.my (unknown [185.222.58.143])
Date: 15 Jun 2020 00:55:55 -0700
Subject: =?UTF-8?B?5Li76aKYOiBOZXcgUHVyY2hhc2UgT3JkZXI=?=
Attachment: New Purchase Order.pdf.rar

Intelligence

File Origin
# of uploads :
2
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-06-15 08:00:06 UTC
File Type:
Binary (Archive)
Extracted files:
8
AV detection:
8 of 48 (16.67%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=wc64qfqnsaw3et4cofrb242ftpf7nwukqt47gg7avqhcd3b44raq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar b0bdc8160d902db24f8271621d73459bcbf6da8a84f9f31be0ac0e21ec3ce441

(this sample)

AgentTesla

Executable exe 77aed51893a8a5e2ab24824dddad42c99cfb46baba36dbe90c72cd8ff6723b7f

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 77aed51893a8a5e2ab24824dddad42c99cfb46baba36dbe90c72cd8ff6723b7f
  
Dropping
AgentTesla

Comments